News for hackers. Stuff that matters.

A comment on Claude's API now supports CORS requests, enabling client-side applications. Parent comment

Re:Claude's API now supports CORS requests, enabling client-... by 6510 on Friday August 23, 2024 @01:34PM (#41331070)
The browser doesn't need to facilitate this.

They could generate an application specific key. Could do that every time one uses the application by forwarding though the website issuing the key and back.

I want government id to work like that. You authorize the website on the .gov then the website only gets a key, no further information. The only thing to knows about the key is that each citizen gets to generate one key for each [registered] domain.

[ Parent | on HN ]
Re:Claude's API now supports CORS requests, enabling client-... by pzo on Friday August 23, 2024 @05:08PM (#41333113)
probably not a good idea for your government to know their each citizen what kind of websites uses. However there are similar idea currently in some crypto projects that trying to solve it to make it distributed, so that if you e.g. like gambling the government won't know about it but website that provide gambling services can still check that you are from non banned countries and adult without any more detailed KYC
[ Parent | on HN ]